Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
File:                     lRN-mWbUuv98OSA41DMX0q-RS6c.mft (raw, json)
Hash identifier:          RI39W8zcZynMt/qnHdvxc2zrAccNaebG3Z53pPtbjgI=
Subject key identifier:   4E:71:78:2B:15:32:C0:D3:BC:07:4A:DB:28:8F:FF:68:B6:9A:51:C2
Authority key identifier: 95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7
Certificate issuer:       /CN=95137e9966d4baff7c392038d43317d2af914ba7
Certificate serial:       019E1D9114600D088A505265DF769566A618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
Manifest number:          EB
Signing time:             Tue 12 May 2026 19:01:47 +0000
Manifest this update:     Tue 12 May 2026 19:01:47 +0000
Manifest next update:     Wed 13 May 2026 19:01:47 +0000
Files and hashes:         1: HDgTefBqgeJ6yK2VqLa7_IllQEE.roa (hash: F3flqUUV45LAA0zvxqlgQgIqdjPOQcg061mWmEfEIVI=)
                          2: lRN-mWbUuv98OSA41DMX0q-RS6c.crl (hash: VaXa0XeipQ2kARnRhG89qdADJCRUIn6gSXnEXHszFqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:14:60:0d:08:8a:50:52:65:df:76:95:66:a6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95137e9966d4baff7c392038d43317d2af914ba7
        Validity
            Not Before: May 12 19:01:47 2026 GMT
            Not After : May 13 19:01:47 2026 GMT
        Subject: CN=4e71782b1532c0d3bc074adb288fff68b69a51c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:99:c0:41:aa:96:78:ce:cb:1e:f5:c7:5c:9b:
                    be:ca:9e:eb:4f:80:9f:c1:7c:9a:46:d1:c9:9e:bd:
                    3f:eb:6e:42:aa:7d:51:b7:be:59:11:32:ba:f4:3a:
                    8a:e7:7f:d2:bc:91:e6:e9:ea:fc:04:94:ce:d0:9c:
                    31:3d:6a:e3:21:f5:be:d6:4a:1f:18:bd:ef:1d:48:
                    2d:7e:7e:76:67:c1:aa:15:2e:33:8f:01:6c:0b:5e:
                    8d:a6:a8:14:fe:54:9a:0d:43:44:ef:7c:55:a0:44:
                    f4:89:d6:08:e2:f4:10:f8:69:f3:70:c8:0f:c2:6b:
                    d9:e7:dc:99:75:c5:60:50:05:ce:89:58:c6:e1:0b:
                    2b:3c:4f:9d:95:10:f8:7e:74:43:e6:d6:c1:b4:d3:
                    bf:83:f4:fd:cf:09:4e:04:09:de:38:12:9c:6e:f7:
                    42:8d:c1:4d:76:9c:59:42:b8:2e:2f:1f:5d:84:c5:
                    a3:8b:cf:8e:37:e3:d6:a1:59:8e:7d:32:46:65:16:
                    1c:81:d3:9e:9d:06:16:bc:ba:07:34:af:2c:13:94:
                    07:26:f0:b7:bc:a7:3c:37:ab:48:18:a8:ff:2a:ee:
                    31:98:96:fa:fc:1d:9f:fb:0b:c0:ef:8c:fe:4d:6a:
                    de:fa:9c:96:4a:38:ac:b9:aa:a3:0a:7b:38:c6:83:
                    10:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:71:78:2B:15:32:C0:D3:BC:07:4A:DB:28:8F:FF:68:B6:9A:51:C2
            X509v3 Authority Key Identifier:
                keyid:95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:39:fb:6a:d4:3a:13:49:f1:2b:1e:51:fe:98:45:1f:2b:50:
         f6:b7:c9:41:41:bb:83:f4:97:69:38:b9:79:c1:96:38:14:07:
         0e:3e:38:ca:9b:13:93:04:0f:2f:d9:cd:8b:a6:fc:3d:52:ca:
         76:93:ca:fc:7a:35:bd:c8:92:c2:da:4a:ab:46:3e:93:7f:e7:
         5d:d6:1d:54:93:58:24:64:eb:92:4c:67:0e:63:29:7c:43:64:
         72:8d:18:dd:96:c4:7c:bd:4b:51:a6:c9:93:fc:1e:9a:1c:a9:
         1e:72:4a:9b:6e:28:13:16:f5:64:74:12:9b:54:38:d6:11:ed:
         09:58:10:92:c0:0e:ae:f1:b9:44:6a:23:6a:60:5e:54:22:56:
         ec:df:41:a2:13:74:d1:77:fb:f9:9d:14:03:d0:44:8f:4d:17:
         13:15:5e:72:5f:02:82:54:ab:3a:e4:4d:5c:b1:cf:1d:96:37:
         1c:36:ea:f2:05:5f:e4:b8:d0:aa:45:17:18:51:d7:2f:60:e2:
         cb:94:eb:d9:26:80:66:77:dd:37:bd:aa:c2:0e:ab:b1:41:82:
         9c:81:55:18:29:5d:91:28:58:b3:99:e8:4c:4b:f0:df:8e:17:
         3f:fb:3f:0d:9a:b6:59:68:0a:c3:cd:ba:60:0b:bd:1a:68:0a:
         ba:4b:c9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:34:29 2026 by rpki-client